@wopr-network/platform-core 1.14.6 → 1.14.8

package/.env.example

@@ -14,6 +14,16 @@ AFFILIATE_BASE_URL=https://wopr.network/join?ref=
 # internal network. Enabling on public deployments weakens SSRF protections.
 # ALLOW_PRIVATE_NODE_HOSTS=false
 
+# --- Provider API probe URLs ---
+# Override the default health-check/validation endpoints per provider.
+# Useful for air-gapped, proxied, or self-hosted deployments.
+# ANTHROPIC_API_URL=https://api.anthropic.com/v1/models
+# OPENAI_API_URL=https://api.openai.com/v1/models
+# GOOGLE_API_URL=https://generativelanguage.googleapis.com/v1/models
+# DISCORD_API_URL=https://discord.com/api/v10/users/@me
+# ELEVENLABS_API_URL=https://api.elevenlabs.io/v1/user
+# DEEPGRAM_API_URL=https://api.deepgram.com/v1/projects
+
 # --- Affiliate billing caps ---
 
 # Maximum number of referrals an affiliate can earn credit for in a 30-day window (default: 20)

package/dist/config/provider-endpoints.d.ts

@@ -2,5 +2,9 @@ import type { Provider } from "../security/types.js";
 /**
  * Base API URLs used to validate provider keys.
  * Centralised here so every consumer references one source of truth.
+ *
+ * Each URL can be overridden via env var for proxied / air-gapped / self-hosted deployments:
+ *   ANTHROPIC_API_URL, OPENAI_API_URL, GOOGLE_API_URL,
+ *   DISCORD_API_URL, ELEVENLABS_API_URL, DEEPGRAM_API_URL
  */
 export declare const PROVIDER_API_URLS: Record<Provider, string>;

package/dist/config/provider-endpoints.js

@@ -1,12 +1,16 @@
 /**
  * Base API URLs used to validate provider keys.
  * Centralised here so every consumer references one source of truth.
+ *
+ * Each URL can be overridden via env var for proxied / air-gapped / self-hosted deployments:
+ *   ANTHROPIC_API_URL, OPENAI_API_URL, GOOGLE_API_URL,
+ *   DISCORD_API_URL, ELEVENLABS_API_URL, DEEPGRAM_API_URL
  */
 export const PROVIDER_API_URLS = {
-    anthropic: "https://api.anthropic.com/v1/models",
-    openai: "https://api.openai.com/v1/models",
-    google: "https://generativelanguage.googleapis.com/v1/models",
-    discord: "https://discord.com/api/v10/users/@me",
-    elevenlabs: "https://api.elevenlabs.io/v1/user",
-    deepgram: "https://api.deepgram.com/v1/projects",
+    anthropic: process.env.ANTHROPIC_API_URL || "https://api.anthropic.com/v1/models",
+    openai: process.env.OPENAI_API_URL || "https://api.openai.com/v1/models",
+    google: process.env.GOOGLE_API_URL || "https://generativelanguage.googleapis.com/v1/models",
+    discord: process.env.DISCORD_API_URL || "https://discord.com/api/v10/users/@me",
+    elevenlabs: process.env.ELEVENLABS_API_URL || "https://api.elevenlabs.io/v1/user",
+    deepgram: process.env.DEEPGRAM_API_URL || "https://api.deepgram.com/v1/projects",
 };

package/dist/db/index.d.ts

@@ -14,10 +14,10 @@ export type DrizzleDb = PgDatabase<PgQueryResultHKT, PlatformSchema>;
 export type PlatformDb = DrizzleDb;
 /** Create a Drizzle database instance wrapping the given pg.Pool. */
 export declare function createDb(pool: Pool): PlatformDb;
-export { schema };
 export type { SQL } from "drizzle-orm";
 export { and, asc, count, desc, eq, gt, gte, ilike, inArray, isNull, like, lt, lte, ne, or, sql } from "drizzle-orm";
 export { pgTable, text } from "drizzle-orm/pg-core";
 export type { AuthUser, IAuthUserRepository } from "./auth-user-repository.js";
 export { BetterAuthUserRepository } from "./auth-user-repository.js";
 export { creditColumn } from "./credit-column.js";
+export { schema };

package/dist/db/index.js

@@ -4,7 +4,6 @@ import * as schema from "./schema/index.js";
 export function createDb(pool) {
     return drizzle(pool, { schema });
 }
-export { schema };
 // Re-export commonly used drizzle-orm operators so consumers using pnpm link
 // resolve them from the same drizzle-orm instance as the schema tables.
 export { and, asc, count, desc, eq, gt, gte, ilike, inArray, isNull, like, lt, lte, ne, or, sql } from "drizzle-orm";
@@ -12,3 +11,4 @@ export { and, asc, count, desc, eq, gt, gte, ilike, inArray, isNull, like, lt, l
 export { pgTable, text } from "drizzle-orm/pg-core";
 export { BetterAuthUserRepository } from "./auth-user-repository.js";
 export { creditColumn } from "./credit-column.js";
+export { schema };

package/dist/fleet/node-repository.d.ts

@@ -1,8 +1,6 @@
 import type { NodeStatus } from "./node-state-machine.js";
 import type { NewProvisioningNode, Node, NodeRegistration, NodeTransition, ProvisionDataUpdate, SelfHostedNodeRegistration } from "./repository-types.js";
-export type { Node, NodeTransition };
-export type { NodeRegistration, SelfHostedNodeRegistration };
-export type { NewProvisioningNode, ProvisionDataUpdate };
+export type { NewProvisioningNode, Node, NodeRegistration, NodeTransition, ProvisionDataUpdate, SelfHostedNodeRegistration, };
 export interface INodeRepository {
     getById(id: string): Promise<Node | null>;
     getBySecret(secret: string): Promise<Node | null>;

package/dist/monetization/incident/postmortem.js

@@ -41,8 +41,8 @@ _[PENDING: Describe what fixed the issue and how service was restored.]_`,
         actionItems: `| Action | Owner | Due Date | Priority |
 |--------|-------|----------|----------|
 | _[PENDING: Add action item]_ | _[PENDING: Owner]_ | _[PENDING: Date]_ | P1 |
-| Improve detection alert thresholds | on-call-engineer | TBD | P2 |
-| Add runbook link to alert notification | on-call-engineer | TBD | P2 |`,
+| Improve detection alert thresholds | on-call-engineer | ${actionItemDueDate(incident)} | P2 |
+| Add runbook link to alert notification | on-call-engineer | ${actionItemDueDate(incident)} | P2 |`,
         lessonsLearned: `**What went well:**
 - _[PENDING: What worked well in detection and response?]_
 
@@ -124,3 +124,9 @@ function formatDuration(ms) {
         return `${hours}h`;
     return `${hours}h ${remainingMinutes}m`;
 }
+function actionItemDueDate(incident) {
+    const base = incident.resolvedAt ?? incident.startedAt;
+    const offsetDays = incident.severity === "SEV1" ? 7 : 14;
+    const due = new Date(base.getTime() + offsetDays * 24 * 60 * 60 * 1000);
+    return due.toISOString().split("T")[0];
+}

package/dist/monetization/incident/postmortem.test.js

@@ -101,4 +101,39 @@ describe("generatePostMortemTemplate", () => {
         expect(report.sections.actionItems).not.toContain("TODO");
         expect(report.sections.lessonsLearned).not.toContain("TODO");
     });
+    it("action items derive due dates from resolvedAt for resolved incidents", () => {
+        const report = generatePostMortemTemplate(makeIncident({
+            resolvedAt: new Date("2026-01-15T13:00:00Z"),
+            severity: "SEV1",
+        }));
+        // SEV1: 7-day offset from resolvedAt → 2026-01-22
+        expect(report.sections.actionItems).toContain("2026-01-22");
+        expect(report.sections.actionItems).not.toContain("TBD");
+    });
+    it("action items derive due dates from startedAt for ongoing incidents", () => {
+        const report = generatePostMortemTemplate(makeIncident({
+            resolvedAt: null,
+            startedAt: new Date("2026-01-15T12:00:00Z"),
+            severity: "SEV1",
+        }));
+        // SEV1: 7-day offset from startedAt → 2026-01-22
+        expect(report.sections.actionItems).toContain("2026-01-22");
+        expect(report.sections.actionItems).not.toContain("TBD");
+    });
+    it("SEV2 action items use 14-day offset", () => {
+        const report = generatePostMortemTemplate(makeIncident({
+            resolvedAt: new Date("2026-01-15T13:00:00Z"),
+            severity: "SEV2",
+        }));
+        // SEV2: 14-day offset from resolvedAt → 2026-01-29
+        expect(report.sections.actionItems).toContain("2026-01-29");
+    });
+    it("SEV3 action items use 14-day offset", () => {
+        const report = generatePostMortemTemplate(makeIncident({
+            resolvedAt: new Date("2026-01-15T13:00:00Z"),
+            severity: "SEV3",
+        }));
+        // SEV3: 14-day offset from resolvedAt → 2026-01-29
+        expect(report.sections.actionItems).toContain("2026-01-29");
+    });
 });

package/dist/security/key-validation.test.js

@@ -1,15 +1,20 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { PROVIDER_API_URLS } from "../config/provider-endpoints.js";
 import { PROVIDER_ENDPOINTS, validateProviderKey } from "./key-validation.js";
 describe("key-validation", () => {
     describe("PROVIDER_API_URLS", () => {
-        it("exports a URL for every supported provider", () => {
-            expect(PROVIDER_API_URLS.anthropic).toBe("https://api.anthropic.com/v1/models");
-            expect(PROVIDER_API_URLS.openai).toBe("https://api.openai.com/v1/models");
-            expect(PROVIDER_API_URLS.google).toBe("https://generativelanguage.googleapis.com/v1/models");
-            expect(PROVIDER_API_URLS.discord).toBe("https://discord.com/api/v10/users/@me");
-            expect(PROVIDER_API_URLS.elevenlabs).toBe("https://api.elevenlabs.io/v1/user");
-            expect(PROVIDER_API_URLS.deepgram).toBe("https://api.deepgram.com/v1/projects");
+        afterEach(() => {
+            vi.unstubAllEnvs();
+            vi.resetModules();
+        });
+        it("exports a URL for every supported provider", async () => {
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.anthropic).toBe("https://api.anthropic.com/v1/models");
+            expect(urls.openai).toBe("https://api.openai.com/v1/models");
+            expect(urls.google).toBe("https://generativelanguage.googleapis.com/v1/models");
+            expect(urls.discord).toBe("https://discord.com/api/v10/users/@me");
+            expect(urls.elevenlabs).toBe("https://api.elevenlabs.io/v1/user");
+            expect(urls.deepgram).toBe("https://api.deepgram.com/v1/projects");
         });
     });
     describe("PROVIDER_ENDPOINTS", () => {
@@ -84,4 +89,56 @@ describe("key-validation", () => {
             }));
         });
     });
+    describe("PROVIDER_API_URLS env overrides", () => {
+        afterEach(() => {
+            vi.unstubAllEnvs();
+            vi.resetModules();
+        });
+        it("uses ANTHROPIC_API_URL when set", async () => {
+            vi.stubEnv("ANTHROPIC_API_URL", "https://custom-anthropic.example.com/v1/models");
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.anthropic).toBe("https://custom-anthropic.example.com/v1/models");
+        });
+        it("uses OPENAI_API_URL when set", async () => {
+            vi.stubEnv("OPENAI_API_URL", "https://custom-openai.example.com/v1/models");
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.openai).toBe("https://custom-openai.example.com/v1/models");
+        });
+        it("uses GOOGLE_API_URL when set", async () => {
+            vi.stubEnv("GOOGLE_API_URL", "https://custom-google.example.com/v1/models");
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.google).toBe("https://custom-google.example.com/v1/models");
+        });
+        it("uses DISCORD_API_URL when set", async () => {
+            vi.stubEnv("DISCORD_API_URL", "https://custom-discord.example.com/api/v10/users/@me");
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.discord).toBe("https://custom-discord.example.com/api/v10/users/@me");
+        });
+        it("uses ELEVENLABS_API_URL when set", async () => {
+            vi.stubEnv("ELEVENLABS_API_URL", "https://custom-elevenlabs.example.com/v1/user");
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.elevenlabs).toBe("https://custom-elevenlabs.example.com/v1/user");
+        });
+        it("uses DEEPGRAM_API_URL when set", async () => {
+            vi.stubEnv("DEEPGRAM_API_URL", "https://custom-deepgram.example.com/v1/projects");
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.deepgram).toBe("https://custom-deepgram.example.com/v1/projects");
+        });
+        it("falls back to defaults when env vars are not set", async () => {
+            vi.resetModules();
+            const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+            expect(urls.anthropic).toBe("https://api.anthropic.com/v1/models");
+            expect(urls.openai).toBe("https://api.openai.com/v1/models");
+            expect(urls.google).toBe("https://generativelanguage.googleapis.com/v1/models");
+            expect(urls.discord).toBe("https://discord.com/api/v10/users/@me");
+            expect(urls.elevenlabs).toBe("https://api.elevenlabs.io/v1/user");
+            expect(urls.deepgram).toBe("https://api.deepgram.com/v1/projects");
+        });
+    });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wopr-network/platform-core",
-  "version": "1.14.6",
+  "version": "1.14.8",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/config/provider-endpoints.ts

@@ -3,12 +3,16 @@ import type { Provider } from "../security/types.js";
 /**
  * Base API URLs used to validate provider keys.
  * Centralised here so every consumer references one source of truth.
+ *
+ * Each URL can be overridden via env var for proxied / air-gapped / self-hosted deployments:
+ *   ANTHROPIC_API_URL, OPENAI_API_URL, GOOGLE_API_URL,
+ *   DISCORD_API_URL, ELEVENLABS_API_URL, DEEPGRAM_API_URL
  */
 export const PROVIDER_API_URLS: Record<Provider, string> = {
-  anthropic: "https://api.anthropic.com/v1/models",
-  openai: "https://api.openai.com/v1/models",
-  google: "https://generativelanguage.googleapis.com/v1/models",
-  discord: "https://discord.com/api/v10/users/@me",
-  elevenlabs: "https://api.elevenlabs.io/v1/user",
-  deepgram: "https://api.deepgram.com/v1/projects",
+  anthropic: process.env.ANTHROPIC_API_URL || "https://api.anthropic.com/v1/models",
+  openai: process.env.OPENAI_API_URL || "https://api.openai.com/v1/models",
+  google: process.env.GOOGLE_API_URL || "https://generativelanguage.googleapis.com/v1/models",
+  discord: process.env.DISCORD_API_URL || "https://discord.com/api/v10/users/@me",
+  elevenlabs: process.env.ELEVENLABS_API_URL || "https://api.elevenlabs.io/v1/user",
+  deepgram: process.env.DEEPGRAM_API_URL || "https://api.deepgram.com/v1/projects",
 };

package/src/db/index.ts

@@ -23,8 +23,6 @@ export function createDb(pool: Pool): PlatformDb {
   return drizzle(pool, { schema }) as unknown as PlatformDb;
 }
 
-export { schema };
-
 export type { SQL } from "drizzle-orm";
 // Re-export commonly used drizzle-orm operators so consumers using pnpm link
 // resolve them from the same drizzle-orm instance as the schema tables.
@@ -34,3 +32,4 @@ export { pgTable, text } from "drizzle-orm/pg-core";
 export type { AuthUser, IAuthUserRepository } from "./auth-user-repository.js";
 export { BetterAuthUserRepository } from "./auth-user-repository.js";
 export { creditColumn } from "./credit-column.js";
+export { schema };

package/src/fleet/node-repository.ts

@@ -9,9 +9,14 @@ import type {
 } from "./repository-types.js";
 
 // Re-export domain types so existing consumers don't break
-export type { Node, NodeTransition };
-export type { NodeRegistration, SelfHostedNodeRegistration };
-export type { NewProvisioningNode, ProvisionDataUpdate };
+export type {
+  NewProvisioningNode,
+  Node,
+  NodeRegistration,
+  NodeTransition,
+  ProvisionDataUpdate,
+  SelfHostedNodeRegistration,
+};
 
 export interface INodeRepository {
   getById(id: string): Promise<Node | null>;

package/src/monetization/incident/postmortem.test.ts

@@ -121,4 +121,51 @@ describe("generatePostMortemTemplate", () => {
     expect(report.sections.actionItems).not.toContain("TODO");
     expect(report.sections.lessonsLearned).not.toContain("TODO");
   });
+
+  it("action items derive due dates from resolvedAt for resolved incidents", () => {
+    const report = generatePostMortemTemplate(
+      makeIncident({
+        resolvedAt: new Date("2026-01-15T13:00:00Z"),
+        severity: "SEV1",
+      }),
+    );
+    // SEV1: 7-day offset from resolvedAt → 2026-01-22
+    expect(report.sections.actionItems).toContain("2026-01-22");
+    expect(report.sections.actionItems).not.toContain("TBD");
+  });
+
+  it("action items derive due dates from startedAt for ongoing incidents", () => {
+    const report = generatePostMortemTemplate(
+      makeIncident({
+        resolvedAt: null,
+        startedAt: new Date("2026-01-15T12:00:00Z"),
+        severity: "SEV1",
+      }),
+    );
+    // SEV1: 7-day offset from startedAt → 2026-01-22
+    expect(report.sections.actionItems).toContain("2026-01-22");
+    expect(report.sections.actionItems).not.toContain("TBD");
+  });
+
+  it("SEV2 action items use 14-day offset", () => {
+    const report = generatePostMortemTemplate(
+      makeIncident({
+        resolvedAt: new Date("2026-01-15T13:00:00Z"),
+        severity: "SEV2",
+      }),
+    );
+    // SEV2: 14-day offset from resolvedAt → 2026-01-29
+    expect(report.sections.actionItems).toContain("2026-01-29");
+  });
+
+  it("SEV3 action items use 14-day offset", () => {
+    const report = generatePostMortemTemplate(
+      makeIncident({
+        resolvedAt: new Date("2026-01-15T13:00:00Z"),
+        severity: "SEV3",
+      }),
+    );
+    // SEV3: 14-day offset from resolvedAt → 2026-01-29
+    expect(report.sections.actionItems).toContain("2026-01-29");
+  });
 });

package/src/monetization/incident/postmortem.ts

@@ -79,8 +79,8 @@ _[PENDING: Describe what fixed the issue and how service was restored.]_`,
     actionItems: `| Action | Owner | Due Date | Priority |
 |--------|-------|----------|----------|
 | _[PENDING: Add action item]_ | _[PENDING: Owner]_ | _[PENDING: Date]_ | P1 |
-| Improve detection alert thresholds | on-call-engineer | TBD | P2 |
-| Add runbook link to alert notification | on-call-engineer | TBD | P2 |`,
+| Improve detection alert thresholds | on-call-engineer | ${actionItemDueDate(incident)} | P2 |
+| Add runbook link to alert notification | on-call-engineer | ${actionItemDueDate(incident)} | P2 |`,
 
     lessonsLearned: `**What went well:**
 - _[PENDING: What worked well in detection and response?]_
@@ -165,3 +165,10 @@ function formatDuration(ms: number): string {
   if (remainingMinutes === 0) return `${hours}h`;
   return `${hours}h ${remainingMinutes}m`;
 }
+
+function actionItemDueDate(incident: IncidentSummary): string {
+  const base = incident.resolvedAt ?? incident.startedAt;
+  const offsetDays = incident.severity === "SEV1" ? 7 : 14;
+  const due = new Date(base.getTime() + offsetDays * 24 * 60 * 60 * 1000);
+  return due.toISOString().split("T")[0];
+}

package/src/security/key-validation.test.ts

@@ -1,16 +1,22 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { PROVIDER_API_URLS } from "../config/provider-endpoints.js";
 import { PROVIDER_ENDPOINTS, validateProviderKey } from "./key-validation.js";
 
 describe("key-validation", () => {
   describe("PROVIDER_API_URLS", () => {
-    it("exports a URL for every supported provider", () => {
-      expect(PROVIDER_API_URLS.anthropic).toBe("https://api.anthropic.com/v1/models");
-      expect(PROVIDER_API_URLS.openai).toBe("https://api.openai.com/v1/models");
-      expect(PROVIDER_API_URLS.google).toBe("https://generativelanguage.googleapis.com/v1/models");
-      expect(PROVIDER_API_URLS.discord).toBe("https://discord.com/api/v10/users/@me");
-      expect(PROVIDER_API_URLS.elevenlabs).toBe("https://api.elevenlabs.io/v1/user");
-      expect(PROVIDER_API_URLS.deepgram).toBe("https://api.deepgram.com/v1/projects");
+    afterEach(() => {
+      vi.unstubAllEnvs();
+      vi.resetModules();
+    });
+
+    it("exports a URL for every supported provider", async () => {
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.anthropic).toBe("https://api.anthropic.com/v1/models");
+      expect(urls.openai).toBe("https://api.openai.com/v1/models");
+      expect(urls.google).toBe("https://generativelanguage.googleapis.com/v1/models");
+      expect(urls.discord).toBe("https://discord.com/api/v10/users/@me");
+      expect(urls.elevenlabs).toBe("https://api.elevenlabs.io/v1/user");
+      expect(urls.deepgram).toBe("https://api.deepgram.com/v1/projects");
     });
   });
 
@@ -108,4 +114,64 @@ describe("key-validation", () => {
       );
     });
   });
+
+  describe("PROVIDER_API_URLS env overrides", () => {
+    afterEach(() => {
+      vi.unstubAllEnvs();
+      vi.resetModules();
+    });
+
+    it("uses ANTHROPIC_API_URL when set", async () => {
+      vi.stubEnv("ANTHROPIC_API_URL", "https://custom-anthropic.example.com/v1/models");
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.anthropic).toBe("https://custom-anthropic.example.com/v1/models");
+    });
+
+    it("uses OPENAI_API_URL when set", async () => {
+      vi.stubEnv("OPENAI_API_URL", "https://custom-openai.example.com/v1/models");
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.openai).toBe("https://custom-openai.example.com/v1/models");
+    });
+
+    it("uses GOOGLE_API_URL when set", async () => {
+      vi.stubEnv("GOOGLE_API_URL", "https://custom-google.example.com/v1/models");
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.google).toBe("https://custom-google.example.com/v1/models");
+    });
+
+    it("uses DISCORD_API_URL when set", async () => {
+      vi.stubEnv("DISCORD_API_URL", "https://custom-discord.example.com/api/v10/users/@me");
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.discord).toBe("https://custom-discord.example.com/api/v10/users/@me");
+    });
+
+    it("uses ELEVENLABS_API_URL when set", async () => {
+      vi.stubEnv("ELEVENLABS_API_URL", "https://custom-elevenlabs.example.com/v1/user");
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.elevenlabs).toBe("https://custom-elevenlabs.example.com/v1/user");
+    });
+
+    it("uses DEEPGRAM_API_URL when set", async () => {
+      vi.stubEnv("DEEPGRAM_API_URL", "https://custom-deepgram.example.com/v1/projects");
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.deepgram).toBe("https://custom-deepgram.example.com/v1/projects");
+    });
+
+    it("falls back to defaults when env vars are not set", async () => {
+      vi.resetModules();
+      const { PROVIDER_API_URLS: urls } = await import("../config/provider-endpoints.js");
+      expect(urls.anthropic).toBe("https://api.anthropic.com/v1/models");
+      expect(urls.openai).toBe("https://api.openai.com/v1/models");
+      expect(urls.google).toBe("https://generativelanguage.googleapis.com/v1/models");
+      expect(urls.discord).toBe("https://discord.com/api/v10/users/@me");
+      expect(urls.elevenlabs).toBe("https://api.elevenlabs.io/v1/user");
+      expect(urls.deepgram).toBe("https://api.deepgram.com/v1/projects");
+    });
+  });
 });